This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa File: 338cbdf4-937d-41ee-8ec5-ca45e166a036.roa (raw, json) Hash identifier: ZUGzgznHrv2x72438/WomsizMPtYEAIFujPauiVHQ+g= Subject key identifier: 78:1C:93:E3:2F:81:3F:D0:0E:B5:38:6C:7F:F2:F6:85:BA:06:6F:64 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 4B5C6E416E30A67B6389A7EA7AA953F50AEE5DF2 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa Signing time: Wed 10 Dec 2025 06:40:03 +0000 ROA not before: Wed 10 Dec 2025 06:40:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 7224 IP address blocks: 193.57.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5c:6e:41:6e:30:a6:7b:63:89:a7:ea:7a:a9:53:f5:0a:ee:5d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:40:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=08dbb874bf362bb4b761951a36be66bc31f9face421e54a9ae351fb250db6c93, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:8e:9c:32:62:11:ee:91:c6:c7:c7:04:e4: 8f:12:3d:03:17:89:dc:14:10:bc:b3:35:39:2e:ea: bc:5e:5c:f9:d4:9e:60:72:ee:2d:20:70:9c:73:4d: 60:12:84:c8:fb:5b:25:0b:6d:2b:57:8a:21:e9:9f: 5a:63:81:58:87:9b:fd:ed:8f:e5:ca:f6:2f:97:7d: 91:57:02:96:28:d3:17:02:3a:cf:f7:4b:ab:15:90: 94:67:64:92:37:ee:4d:f2:a2:68:04:6c:b5:0f:6a: 2a:b7:d3:fd:09:1b:b1:68:a1:fc:fb:75:0a:3e:d4: 3d:82:78:86:4c:fd:ae:42:fe:c8:b6:0b:85:11:88: 38:d2:63:3a:9d:43:c2:7c:16:66:5a:8e:7e:53:e7: f1:45:ae:bf:97:77:f0:e5:46:ef:1c:25:63:41:60: 8f:14:e3:9d:92:e3:c7:ff:21:ef:e8:47:b9:9b:38: 92:0d:cc:2c:db:5a:17:97:b2:c8:cb:e7:a5:07:eb: 4e:7d:11:0f:f4:a0:d0:fa:f5:e5:a6:b5:55:19:31: b4:45:46:23:10:db:a0:18:89:3c:a3:be:81:88:43: d8:0d:c5:e4:90:37:0e:88:2d:16:7c:67:a2:f4:9d: 17:01:49:60:51:b4:68:58:df:51:bf:ce:76:39:85: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:93:E3:2F:81:3F:D0:0E:B5:38:6C:7F:F2:F6:85:BA:06:6F:64 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.182.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:d8:8c:1f:bf:91:54:bc:97:1c:2c:fa:ae:72:c9:9f:1e:de: de:77:ea:19:dc:da:0d:e2:85:de:4a:14:ea:4d:01:a1:dd:91: 57:5d:43:26:5e:d9:6c:ee:7b:b1:d6:ac:12:95:a8:fd:17:76: e4:f4:02:56:72:e7:1f:a0:d3:2c:59:e5:74:5c:74:4d:41:69: 96:61:ef:a0:f1:ab:6a:21:9a:3f:3a:8a:3e:36:c0:5d:0c:81: ce:4e:e2:44:b7:80:99:f8:a3:49:78:70:6b:26:b2:b1:d3:38: 19:ea:48:dd:61:10:0a:29:e9:8b:45:fb:52:1c:45:89:17:bb: 63:ca:69:ca:8e:a1:2e:e4:1a:d4:fa:17:8c:0c:2c:90:49:69: 66:9e:ce:26:8b:e3:78:a2:c4:45:6b:cb:b5:b8:be:27:bf:8c: 5e:e2:99:01:43:db:a2:ea:7d:af:df:56:0d:72:3a:5f:d4:40: f2:22:c1:b3:bb:95:3b:8b:f6:d7:8c:f7:50:8f:a4:b6:1d:16: 61:47:1f:6c:72:21:8e:d5:48:06:83:7a:aa:c0:35:fb:8f:4a: d2:3d:73:ee:62:34:5e:1f:9b:0a:fe:4f:ba:af:cf:6c:a3:1e: ce:a5:fc:2e:98:60:fe:30:27:e1:1a:44:a1:31:f9:db:6c:f5: 2b:dc:0f:3b -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUS1xuQW4wpntjiafqeqlT9QruXfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjQwMDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDA4ZGJiODc0YmYzNjJiYjRiNzYxOTUxYTM2YmU2NmJjMzFmOWZhY2U0MjFl NTRhOWFlMzUxZmIyNTBkYjZjOTMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqzjpwyYhHukcbHxwTkjxI9AxeJ3BQQvLM1OS7qvF5c+dSeYHLuLSBwnHNN YBKEyPtbJQttK1eKIemfWmOBWIeb/e2P5cr2L5d9kVcClijTFwI6z/dLqxWQlGdk kjfuTfKiaARstQ9qKrfT/QkbsWih/Pt1Cj7UPYJ4hkz9rkL+yLYLhRGIONJjOp1D wnwWZlqOflPn8UWuv5d38OVG7xwlY0FgjxTjnZLjx/8h7+hHuZs4kg3MLNtaF5ey yMvnpQfrTn0RD/Sg0Pr15aa1VRkxtEVGIxDboBiJPKO+gYhD2A3F5JA3DogtFnxn ovSdFwFJYFG0aFjfUb/OdjmFKbkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR4HJPj L4E/0A61OGx/8vaFugZvZDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MzM4Y2JkZjQtOTM3ZC00MWVlLThlYzUtY2E0NWUxNjZhMDM2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN BgkqhkiG9w0BAQsFAAOCAQEALtiMH7+RVLyXHCz6rnLJnx7e3nfqGdzaDeKF3koU 6k0Bod2RV11DJl7ZbO57sdasEpWo/Rd25PQCVnLnH6DTLFnldFx0TUFplmHvoPGr aiGaPzqKPjbAXQyBzk7iRLeAmfijSXhwayaysdM4GepI3WEQCinpi0X7UhxFiRe7 Y8ppyo6hLuQa1PoXjAwskElpZp7OJovjeKLERWvLtbi+J7+MXuKZAUPboup9r99W DXI6X9RA8iLBs7uVO4v214z3UI+kth0WYUcfbHIhjtVIBoN6qsA1+49K0j1z7mI0 Xh+bCv5Puq/PbKMezqX8Lphg/jAn4RpEoTH522z1K9wPOw== -----END CERTIFICATE-----Generated at Wed Jan 21 01:09:27 2026 by rpki-client